CVE-2023-20576: AMD Ryzen 3000 Series Desktop Processors

High severity, CVSS 7.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.

Affected products

• AMD AMD Ryzen 3000 Series Desktop Processors
• AMD AMD Ryzen 4000 Series Desktop Processors With Radeon Graphics
• AMD AMD Ryzen 5000 Series Desktop Processors
• AMD AMD Ryzen 5000 Series Desktop Processors With Radeon Graphics
• AMD AMD Ryzen 6000 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7000 Series Processors
• AMD AMD Ryzen 7020 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7035 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7040 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7045 Series Mobile Processors
• AMD AMD Ryzen Embedded 5000
• AMD AMD Ryzen Embedded v3000
• AMD AMD Ryzen Threadripper Pro 5000wx Processors

Published 2026-09-02. Last modified 2026-09-04.